Px4 Drone Autopilot

3 CVEs product

Monthly

CVE-2026-26742 HIGH POC This Week

PX4 Autopilot versions 1.12.x through 1.15.x can be forced into an unsafe re-arm state when pilots switch to Manual mode and re-arm within 5 seconds of landing, bypassing critical pre-flight safety checks and throttle validation. This allows attackers or malicious pilots to trigger immediate high-thrust takeoff, resulting in loss of aircraft control. Public exploit code exists for this vulnerability and no patch is currently available.

Authentication Bypass Px4 Drone Autopilot
NVD GitHub VulDB
CVSS 3.1
8.1
EPSS
0.0%
CVE-2026-26741 HIGH POC This Week

PX4 Autopilot versions 1.12.x through 1.15.x contain a logic flaw in the mode switching mechanism. [CVSS 8.1 HIGH]

Authentication Bypass Px4 Drone Autopilot
NVD GitHub VulDB
CVSS 3.1
8.1
EPSS
0.0%
CVE-2024-40427 HIGH POC PATCH This Month

Stack Buffer Overflow in PX4-Autopilot v1.14.3, which allows attackers to execute commands to exploit this vulnerability and cause the program to refuse to execute. Rated high severity (CVSS 7.9), this vulnerability is low attack complexity. Public exploit code available.

Buffer Overflow Px4 Drone Autopilot
NVD GitHub
CVSS 3.1
7.9
EPSS
0.2%
CVE-2026-26742
EPSS 0% CVSS 8.1
HIGH POC This Week

PX4 Autopilot versions 1.12.x through 1.15.x can be forced into an unsafe re-arm state when pilots switch to Manual mode and re-arm within 5 seconds of landing, bypassing critical pre-flight safety checks and throttle validation. This allows attackers or malicious pilots to trigger immediate high-thrust takeoff, resulting in loss of aircraft control. Public exploit code exists for this vulnerability and no patch is currently available.

Authentication Bypass Px4 Drone Autopilot
NVD GitHub VulDB
CVE-2026-26741
EPSS 0% CVSS 8.1
HIGH POC This Week

PX4 Autopilot versions 1.12.x through 1.15.x contain a logic flaw in the mode switching mechanism. [CVSS 8.1 HIGH]

Authentication Bypass Px4 Drone Autopilot
NVD GitHub VulDB
CVE-2024-40427
EPSS 0% CVSS 7.9
HIGH POC PATCH This Month

Stack Buffer Overflow in PX4-Autopilot v1.14.3, which allows attackers to execute commands to exploit this vulnerability and cause the program to refuse to execute. Rated high severity (CVSS 7.9), this vulnerability is low attack complexity. Public exploit code available.

Buffer Overflow Px4 Drone Autopilot
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy